A group of hackers from North Korea is using a malicious Google Chrome or Chromium-based Microsoft Edge extension to spy or user email accounts, according to cybersecurity firm Volexity. The malicious extension by the hacker group titled 'SharpTongue' is capable of stealing email content from Gmail and AOL.

SharpTongue is targeting and victimising individuals working for organisations in the United States, Europe and South Korea who work on topics involving North Korea, nuclear issues, weapons systems, and other matters of strategic interest to North Korea. Within the last year, Volexity has responded to multiple incidents involving SharpTongue and, in most cases, has discovered a malicious Google Chrome or Microsoft Edge extension dubbed as 'SHARPEXT'.